A new quantum authentication method relies on entanglement, not pre-shared keys

Researchers at Sorbonne Université and the University of Edinburgh have experimentally demonstrated a Quantum Key Distribution (QKD) protocol that eliminates the need for pre-shared secret keys, a longstanding limitation of the technology. The team adopted a Hybrid Entangled Physical Unclonable Function (PUF) protocol to generate an Information-Theoretically Secure (ITS) initial key with minimal hardware requirements. This approach allows for a fully ITS-authenticated entanglement-based QKD protocol, addressing a critical vulnerability to Man-in-the-Middle attacks. This work enables more lightweight and readily deployable quantum networks without compromising security guarantees.

Entanglement-Based QKD & Authentication Challenges

The Hybrid Entangled Physical Unclonable Function (HEPUF) establishes an initial secure key under conditions requiring minimal hardware, a departure from conventional QKD systems. This method generates an Information-Theoretically Secure (ITS) key, meaning its security stems from the laws of physics rather than the computational difficulty of breaking an algorithm, and circumvents the need for pre-shared secrets typically required to authenticate the classical channel in QKD protocols.

The HEPUF uses both the unique hardware fingerprint of a Physical Unclonable Function and quantum properties like local indistinguishability to achieve this authentication. This approach integrates HEPUF authentication directly within an Entanglement-Based (EB) QKD protocol, creating a fully ITS-authenticated system. The initial key generated by the HEPUF serves a dual purpose; it acts as the seed for base choices within the EB QKD subroutine and fuels a Wegman-Carter (WC) authentication scheme, ensuring information-theoretic security for the entire classical post-processing channel.

In scenarios prioritizing key rate, the initial base choices can be declared publicly, simplifying the process and relying solely on the key for the WC scheme. The security of the protocol is defined by several failure probabilities, each contributing to the overall key security. Specifically, the QKD protocol is considered ${\epsilon }_{QKD}$-secure if ${\epsilon }_{QKD}$ ≤ ${\epsilon }_{PA}$ + ${\epsilon }_{PE}$ + ${\epsilon }_{EC}$ + ${\epsilon }_A$, where ${\epsilon }_{PA}$ and ${\epsilon }_{PE}$ represent the failure probabilities associated with Privacy Amplification and Parameter Estimation, respectively.

The term ${\epsilon }_{EC}$ accounts for potential failures during Error Correction, and ${\epsilon }_A$ represents the failure probability of authenticating the classical communication channel. The HEPUF’s operational speed presents a practical consideration, highlighting the importance of optimizing component speeds for real-world deployment. During operation, the HEPUF is first locked into a specific mode before being used to generate entangled pairs in response to a received challenge, denoted as x.

In this authentication phase, the HEPUF uses the outcome of a classical PUF, y, and encodes a substring $y^2$ into predefined bipartite states. Specifically, if a bit of $y^2$ is 0, the generated state is |${\Phi }^{\text{+}}$⟩, and if it is 1, the state is |${\Psi }^{\text{−}}$⟩. By synthesizing these primitives, the HEPUF facilitates a full authentication protocol that preserves the information-theoretic security standards of the quantum communication network without relying on computational assumptions.

This level of precision is important for maintaining the overall security of the QKD system. The experimental results demonstrate a viable path toward lightweight, readily deployable quantum networks that do not compromise on security, addressing a long-standing challenge in the field of quantum communication.

Hybrid Entangled PUF (HEPUF) Architecture

Mode 0, exclusively available to the Verifier, facilitates the creation of a classical Challenge-Response Database, a one-time operation designed to establish the initial parameters for secure communication. Following database generation, the HEPUF is locked into Mode 1 before transmission to the Prover, preparing the device for the subsequent authentication phase. This deliberate sequencing ensures the integrity of the initial setup and prevents unauthorized access to the core authentication mechanism.

The authentication phase itself uses Mode 1, where the HEPUF generates entangled pairs in response to challenges received from the Verifier. This process relies on the outcome of a classical PUF, denoted as y, with the least significant bit of y squared, y², determining the generated quantum state. Specifically, if y² evaluates to 0, the HEPUF produces the |Φ⁺⟩ state; if it evaluates to 1, the generated state is |Ψ⁻⟩.

This encoding of classical information into quantum states forms the foundation of the HEPUF’s security, linking the physical properties of the device to the cryptographic key exchange. The design allows for a versatile framework for implementing a broader class of protocols, including prepare-and-measure QKD, demonstrating a protocol-agnostic solution capable of bootstrapping security without relying on computational assumptions. This performance validates the theoretical stability of the HEPUF architecture and addresses a critical bottleneck in practical Quantum Key Distribution (QKD) systems, the need for secure initial authentication.

The security of the HEPUF is intrinsically linked to a device-specific parameter, δ and the sample size, m, as defined in the protocol. This relationship highlights the importance of careful device characterization and parameter selection to maximize security margins, and the researchers propose two distinct operational regimes within the HEPUF framework. The first prioritizes generality, integrating smoothly with different cryptographic schemes.

The second uses the non-local correlations of entangled states to relax the bases secrecy requirement, significantly enhancing overall protocol efficiency. This adaptability emphasises the HEPUF’s potential as a versatile quantum primitive, capable of supporting a wide range of quantum communication protocols. The HEPUF’s internal structure comprises a classical p-randomness PUF housed within a tamper-proof enclosure, alongside the encoding and measurement mechanisms essential for its operation.

The experimental realization of HEPUF authentication integrated within an Entanglement-Based (EB) QKD system represents, to the best of the researchers’ knowledge, the first demonstration of its kind. This achievement bridges the gap between hardware security and quantum communication protocols. The implications extend beyond QKD, suggesting a path toward building more robust and versatile quantum networks.

By eliminating the need for pre-shared secrets, the HEPUF simplifies deployment and reduces the risk of compromise, making quantum communication more accessible and secure. The team believes this work establishes the HEPUF as an important tool for future quantum networks, offering a hardware-based solution to a long-standing challenge in the field.

Information-Theoretic Security via HEPUF Authentication

This level of performance demonstrates the viability of a Hybrid Entangled Physical Unclonable Function (HEPUF) for establishing a secure initial key without relying on pre-shared secrets, a long-standing obstacle to widespread QKD deployment. The approach fundamentally alters how authentication is handled in QKD, moving away from computationally-hard problems to security rooted in the laws of physics.

The HEPUF’s design uses the unique, device-specific characteristics of a physical unclonable function alongside the non-local correlations inherent in entangled quantum states, creating a system where security isn’t based on the difficulty of cracking an algorithm, but on the impossibility of perfectly cloning an unknown quantum state. This allows for a fully Information-Theoretically Secure (ITS) authenticated entanglement-based QKD protocol, a critical advancement for networks requiring the highest levels of security.

The researchers specifically designed the HEPUF to be compatible with a broad range of QKD architectures, including prepare-and-measure schemes, and other cryptographic primitives like quantum digital signatures, expanding its potential applications beyond basic key exchange. A key aspect of this work is the demonstration of two distinct operational scenarios, each offering equivalent security but differing in efficiency. The second scenario, optimized for key rate, publicly discloses the initial bases choices, relying solely on the HEPUF-generated key for the WC authentication, thereby reducing the throughput demands on the HEPUF itself.

The analysis reveals a direct relationship between these factors and the overall security bound, ${\epsilon }_{HEPUF}$, which quantifies the probability of an adversary successfully compromising the authentication key. This result is particularly significant as it minimizes the resource overhead required for authentication.

The experimental setup employed a high-fidelity polarization-encoded Bell-state source based on Type-II spontaneous parametric down-conversion (SPDC) in a Sagnac interferometer configuration, allowing for precise control and measurement of entangled photons. The authentication subroutine itself involves a carefully orchestrated exchange between Alice (the Verifier) and Bob (the Prover). Alice first creates a classical Challenge-Response Database using the HEPUF and securely transmits it, along with the HEPUF itself, to Bob.

She then sends a random challenge to Bob, who computes the corresponding response using the HEPUF and prepares a qubit based on the result, sending it back to Alice. “By preventing basis-dependent attacks,” the paper explains, “this approach renders the authentication protocol compatible with a wide range of quantum cryptographic schemes.” The overall reliability is characterized by correctness and security bounds, ensuring the integrity of the authenticated classical channel.

The demonstrated protocol establishes a secure key, $K_A$ = $K_B$, of length l, and relies on the HEPUF, quantum and public channels for operation. The researchers detail the process in a step-by-step manner, outlining the setup, authentication procedure and the conditions required to maintain the desired security levels. The success of this experiment represents a step towards realizing practical quantum network protocols that are not only secure against future quantum computing threats but also more accessible and easier to implement than existing solutions.

QBER Performance & Secret Key Distribution (50 dB)

Maintaining a Quantum Bit Error Rate (QBER) consistently below 0.6%, the experimental protocol successfully distributed secret keys across total channel attenuation reaching 50 dB, demonstrating resilience in challenging transmission conditions. This performance level, achieved using a telecom wavelength Bell-state source, signifies compatibility with existing fiber-optic infrastructure and moves beyond laboratory demonstrations toward practical network deployment. This approach relaxes the demands on HEPUF throughput, as the initial secret key, designated $K_{AUT}$, is used exclusively for classical channel authentication rather than the more resource-intensive process of determining measurement bases.

The experimental setup included a rigorous assessment of the protocol under two distinct operational regimes, highlighting the versatility of the HEPUF as a secure quantum primitive. In one scenario, the system prioritized broad compatibility with various cryptographic schemes, while the other focused on maximizing efficiency by using the intrinsic properties of entanglement-based QKD.

The convergence of the QBER with the number of measured samples further validates the inherent stability of the source and the robustness of the authentication scheme. The successful extraction of a secret key under high attenuation conditions validates the protocol’s robustness and demonstrates a viable path toward realizing practical quantum networks. The researchers detail that the system maintains a remarkably low QBER across all attenuation regimes, indicating a high degree of resilience to noise and loss.

This research moves beyond theoretical models by demonstrating a functional system that minimizes explicit hardware assumptions, an important step toward widespread adoption. The authors developed a unified framework tailored for the two operational regimes, further solidifying the HEPUF’s position as a versatile and secure quantum primitive.

The observed performance gains, particularly the increased secret-key rate in the high-efficiency implementation, are directly attributable to the reduced consumption of the initial key. While mechanical actuation speed currently limits absolute throughput, the team anticipates further improvements through optimization of these components. The experimental results demonstrate that the HEPUF-authenticated QKD protocol can operate reliably even under conditions of significant channel loss.

The successful demonstration of secure key distribution at 50 dB attenuation represents an advancement in the field, bringing practical quantum communication closer to reality. The team’s work establishes a foundation for future research focused on optimizing system performance and exploring new applications for HEPUF-based authentication in quantum networks.

More like this

Quantum NetworksTeleportation criteria identify entanglement dimension in quantum networks

Quantum HardwarePhoton Source May Lower Telecom Detector Costs for QKD

Quantum SecurityStealthPQ uses quantum-resistant keys against glitch & side-channel attacks

Quantum AlgorithmsHybrid quantum network flags suspicious accounts with fewer false alarms